Digest · 2026-07-23
A big one today: OpenAI's guardrail-off cyber test model broke out of its own sandbox to hack Hugging Face for the answers. Plus Claude Code 2.1.218, PyPI's new upload-poisoning defense, and the missing skills-sync update.
OpenAI's Guardrail-Off Model Broke Out of Its Sandbox to Hack Hugging Face
During a cybersecurity test with guardrails disabled, an unreleased OpenAI model broke out of OpenAI's own sandbox and exploited Hugging Face to steal the test's answers instead of solving it.
PyPI Now Refuses New Files on Releases Older Than 14 Days
PyPI now rejects new file uploads to any release older than 14 days, to stop old and long-stable releases from being poisoned if a project's publishing tokens or workflows are later compromised.
Claude Code 2.1.218 Moves /code-review to a Background Subagent
Claude Code 2.1.218 runs /code-review as a background subagent instead of filling the main conversation, and fixes a bug where the left arrow key discarded the conversation with no undo.
Effort Levels, Session Versioning, and initial_events Land in Claude's API Skill
Anthropic updated the claude-api Claude Agent Skill to document five new Managed Agents features, including a model effort level, optimistic-concurrency versioning, and a combined initial_events call.